Static task
static1
Behavioral task
behavioral1
Sample
840e7d17c5f7b1f1e961f8b229f969bb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
840e7d17c5f7b1f1e961f8b229f969bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
840e7d17c5f7b1f1e961f8b229f969bb_JaffaCakes118
-
Size
1KB
-
MD5
840e7d17c5f7b1f1e961f8b229f969bb
-
SHA1
bd0ed902d3f31531d8d025656edc4fdce260c486
-
SHA256
ea3f753dbc75ff0862f059424751d2b53c39681c3df5984a6cce1d3cfab09bb5
-
SHA512
5018fe90c8da13dc86d6bba207ca8c9195aef37da25ec537dc1ea2af3afdd8828b54c1365ddf789023ffc1bc78a51abc89b838c984234eb2e42808216b5ff962
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 840e7d17c5f7b1f1e961f8b229f969bb_JaffaCakes118
Files
-
840e7d17c5f7b1f1e961f8b229f969bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
eab9ebd2d0765b733e92c03f287c967e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrcatA
GetWindowsDirectoryA
ExitProcess
urlmon
URLDownloadToFileA
shell32
ShellExecuteA
Sections
.text Size: 1024B - Virtual size: 550B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ